PowerFGT: a PowerShell module for FortiGate

[alagoutte]

Hi,

I have been working for several months on a PowerShell module that uses the FortiGate REST API.

This module is available on psgallery(.com) : https://www.powershellgallery.com/packages/PowerFGT

Actually, we support to connect to HTTPS or HTTP

and use the following feature :

[ul]

Address (Add/Get/Copy/Set/Remove object type ipmask/subnet)

AddressGroup (Add/Get/Copy/Set/Remove and Add/Remove Member)

DNS (Get)

HA (Get)

Interface (Get)

IP Pool (Get)

Local User (Get)

Policy (Add/Get/Remove)

RoutePolicy (Get)

Service (Get)

Service Group (Get)

Static Route (Get)

System Global (Get)

VDOM (Get)

Virtual IP (Get/Add/Remove object type static-nat)

Virtual WAN Link/SD-WAN (Get)

VPN IPsec Phase 1/Phase 2 Interface (Get)

Zone (Get)[/ul]

it is very easy to use (and install)

Launch PowerShell command line and launch following command for install

Install-Module PowerFGT

for load the module

Import-Module PowerFGT

Connect to your firewall

Connect-FGT 192.0.2.1

You get a prompt to ask credential

for example to get all address use

Get-FGTFirewallAddress

You can get the list of command available via

Get-Command -Module PowerFGT

 and for get help (and example about a command for example Add-FGTFirewallAddress)

Get-Help Add-FGTFirewallAddress -Full

More documentation, example is available on https://github.com/FortiPower/PowerFGT and you can also report issue/enhance !

[SogeKing]

Thanks for this great module @alagoutte. Just tried some feature but can't seem to find a way to add mac address to Address or Address Group. Am I missing something?

[alagoutte]

Hi,

Not yet ! can you ask on Github project ? https://github.com/FortiPower/PowerFGT/issues

[SogeKing]

Sure, thanks @alagoutte!